Brazil has fined Facebook 6.6 million reais ($1.64 million) for improper sharing of user data.

The fine is the latest penalty levied against the company related to the Cambridge Analytica scandal.

That’s the maximum penalty Brazilian authorities could hit Facebook with before new data protection legislation comes into force. The Brazilian General Personal Data Protection Act will be enacted in August as things stand, though a proposal has been made to delay the enforcement date by two years. Facebook has 10 days to appeal the fine. Otherwise, it’ll have to pay up in 30 days.

Cambridge Analytica obtained data for around 87 million users through a personality quiz app on the Facebook platform.

The penalty follows the UK's data protection watchdog fining Facebook £500,000 earlier this year, following a Cambridge Analytica-related investigation. Facebook also paid $5 billion to settle a related U.S. government lawsuit. As part of that settlement, Facebook also agreed new terms over how it handles user data along with a management structure shakeup.